Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74324180-3565-38af-8404-efc4748c88b1.roa
File:                     74324180-3565-38af-8404-efc4748c88b1.roa (raw, json)
Hash identifier:          /tS3JZYsJDzdBeaiN8Mvt6vhsC+mV0O9hafW4xDjtYQ=
Subject key identifier:   47:6C:23:AB:1A:A6:EA:4A:D1:55:16:89:89:5D:56:9C:54:80:C0:B4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F0145BC5F3FA879C9D8B40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74324180-3565-38af-8404-efc4748c88b1.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397241
IP address blocks:        156.154.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:14:5b:c5:f3:fa:87:9c:9d:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=68ec7445-cc4a-44f2-b39d-b41e337c1e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:0b:f3:9a:b3:78:5f:1a:dc:81:77:58:3c:
                    64:28:0c:f8:a7:67:40:00:fa:10:4e:3c:18:54:de:
                    41:e7:d0:2d:63:49:57:f3:7f:05:c1:4a:09:76:cb:
                    5d:a2:fc:b8:10:db:f9:0c:63:51:a0:b1:e1:7c:67:
                    67:aa:21:76:ea:89:7e:bf:3a:a5:21:36:85:f3:4d:
                    11:14:c2:d4:ae:1f:54:2d:3c:f1:28:f8:98:dd:bd:
                    17:6d:05:e1:38:d9:24:61:07:26:b7:11:cb:23:72:
                    a3:fa:15:fa:ed:c3:be:14:d4:80:0b:e8:a9:96:22:
                    c3:11:85:44:63:06:50:06:10:cc:db:fb:a5:a4:3f:
                    02:a3:2f:ff:f4:f0:31:7b:74:0e:d1:8c:a6:ea:4b:
                    9e:f3:ce:e3:95:cd:62:e9:ff:4a:2e:a1:a4:25:f3:
                    e5:9f:0c:8e:2e:2c:48:52:2a:80:95:b5:fa:70:e1:
                    51:b0:e0:7d:05:cb:6d:d9:f7:09:b7:24:8c:85:9f:
                    24:30:ad:da:de:f6:b4:5d:a0:d3:d7:7d:52:6e:16:
                    eb:44:95:40:97:e9:0a:19:ac:d7:e7:95:a6:4c:20:
                    50:c7:af:f1:a2:82:78:bc:d9:a1:3c:de:dc:5a:a0:
                    a1:5f:78:b1:ed:8c:85:ba:2f:a2:e8:4e:eb:ee:e3:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:23:AB:1A:A6:EA:4A:D1:55:16:89:89:5D:56:9C:54:80:C0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74324180-3565-38af-8404-efc4748c88b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:3b:f2:0f:d8:5e:93:ad:13:64:38:08:e3:f8:f2:73:b8:
         16:e3:1c:73:65:07:9e:9b:9d:96:20:b1:59:cf:16:ff:6f:d1:
         a6:cc:03:e9:a8:c0:24:6e:1d:c9:3c:27:a6:ad:29:99:56:16:
         60:8a:f5:2f:eb:06:37:39:2f:33:64:f3:fb:f7:e2:a9:24:ae:
         52:97:dc:1d:17:df:c6:3a:ad:15:46:93:bd:a5:11:bf:db:df:
         ac:f7:d2:44:21:2e:bf:85:8f:ca:e4:e2:d7:0a:5f:b0:82:2c:
         1b:2e:1b:81:77:63:e7:4f:67:67:a3:16:0f:9d:76:d5:4c:ff:
         b5:68:6b:60:83:12:03:58:6e:f3:ca:37:6f:42:14:f2:c4:68:
         74:e3:40:8c:25:9d:16:a1:6c:06:a6:ff:22:c8:41:07:10:14:
         84:e8:0f:72:f0:93:42:c7:d3:f0:86:28:e4:06:54:45:09:65:
         08:66:3e:c9:47:2d:04:61:f7:95:33:11:64:5f:46:58:6e:41:
         d5:d9:6c:ba:c5:17:7f:ad:1b:cc:b2:a7:6d:c8:e0:79:4d:69:
         30:49:e2:4e:f4:ed:c4:ad:0c:8a:75:0f:42:b1:7a:b3:94:d6:
         e9:de:58:1f:d7:a9:81:e6:1f:2a:5b:eb:aa:8a:79:86:67:c7:
         8f:18:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:30:54 2025 by rpki-client